[SSSD] Design discussion: Wildcard Data Provider requests

Jakub Hrozek jhrozek at redhat.com
Mon Mar 9 12:30:35 UTC 2015


On Mon, Mar 09, 2015 at 01:25:22PM +0100, Pavel Březina wrote:
> On 03/09/2015 12:50 PM, Jakub Hrozek wrote:
> >On Mon, Mar 09, 2015 at 11:52:04AM +0100, Pavel Březina wrote:
> >>Can we not use the ldap_ prefix since this option is supposed to be present
> >>also in responder?
> >
> >Well, I don't think it should be used in the responder. I think the
> >responder should just request whatever it needs to and let storing the
> >data to cache for the Data Provider.
> >
> >What we can do is to return a DP error to make it clear that DP hit a
> >sizelimit and the result might be incorrect, but that's it.
> 
> You can have multiple domains, therefore you want to limit both dp request
> and ifp request. At least this was agreed on.

Maybe :-) I don't remember to be honest. But then I think the responder
and domain options should be totally independent.

What would the responder option do precisely? Limit replies how, limit
how many objects are exposed on the bus? The dp request is always sent
to a particular domain, not all domains, right?



More information about the sssd-devel mailing list